---
title: "Changelog - GeCert"
description: "Release history of GeCert (server, from 0.1.0 to 1.8.4) and of Gecert Connect (from 1.0.0 to 1.2.0), with new features, improvements, bug fixes and whether each version updates the database model."
canonical: "https://docs.lacunasoftware.com/en-us/articles/gecert/changelog"
locale: "en"
product: "GeCert"
last_updated: "2026-10-13"
---

# Changelog - GeCert

The GeCert server and [Gecert Connect](https://docs.lacunasoftware.com/en-us/articles/gecert/gecert-connect) have independent versions. The server version is shown by
`/api/system/info` ([see how to check it](https://docs.lacunasoftware.com/en-us/articles/gecert/on-premises/check-version)); the Gecert Connect version, under **Advanced Settings**.

## Server

### 1.8.4 (2024-11-27)

Updates database model: no

#### New features

`GET /api/keys/stopwatch-info` and `GET /api/keys/{id}/stopwatch-info` routes, with the time spent in each step, used by the
**Check server connection** button of Gecert Connect 1.2.0

### 1.8.3 (2024-11-11)

Updates database model: no

#### Bug fixes

Fixed the display of the failure messages list and the use of the loading indicator in the web application

### 1.8.2 (2024-11-11)

Updates database model: no

#### Bug fixes

Fixed concurrency issue

### 1.8.1 (2024-11-11)

Updates database model: no

#### Bug fixes

Fixed the inclusion of the user's organizations when listing certificate accesses

### 1.8.0 (2024-11-11)

Updates database model: no

#### New features

Copy of every authorization from one certificate to another (`POST /api/certificate-access/certificates/{from}/to/{to}` and the
**Copy authorizations to another certificate** option in the certificate details)

#### Improvements

The response of a certificate access grant now carries the user's e-mail address

Message explaining the access denied (HTTP 403) error in Gecert Connect, in case notifications are muted

### 1.7.6 (2024-04-10)

Updates database model: no

#### Improvements

Logs: request ID in Serilog, operation times in the key stores, in the KMIP (Kryptus) client and in the routes used by the KSP, and
cleaner logging of database commands

Certificate validity dates shown with the day (`dd/MM/yyyy`)

Removed the decryption debugging code from the Kryptus key store

### 1.7.5 (2024-04-02)

Updates database model: no

#### Improvements

Cache of the Kryptus HSM responses (KMIP client), with the `ResponseCacheDisabled` option in the key store configuration

Logs of the Gecert Connect requests to the server

### 1.7.4 (2023-12-20)

Updates database model: no

#### Bug fixes

Fixed the block cipher mode and the hashing algorithm in the Kryptus HSM KMIP client, and the padding algorithm name in the logs

### 1.7.3 (2023-12-05)

Updates database model: yes

#### New features

Key store access per organization: granted and removed by the Sys Admin in the organization details (`POST` and
`DELETE /api/key-store-access`, `GET /api/subscriptions/{id}/key-stores`), with the `ViewKeyStoreAccess` and `ManageKeyStoreAccess`
permissions. Only released key stores are offered to the organization

`RS512` algorithm in signature and verification operations

Option to use HSM (`UseHsm`) when importing keys into Azure Key Vault, and `TenantId` key store setting

#### Improvements

Gecert Connect: WebView2 Runtime included in the installer; retry of the request after the token is refreshed, with logout if it fails
again; cache of the keys already verified

### 1.7.2 (2023-08-28)

Updates database model: no

#### Bug fixes

Handled the case where the default key store is not available

### 1.7.1 (2023-08-28)

Updates database model: no

#### Improvements

Error when trying to insert a key into a key store with key insertion disabled, and message in the web application when no key store is
available

The `DatabaseDefault` key store can be overridden in the `KeyStores` configuration section

### 1.7.0 (2023-08-24)

Updates database model: yes

#### New features

**Certificate usage**: list of the operations performed with the key of each certificate (`GET /api/certificates/{id}/usage`)

**Key Store Details** in the Sys Admin area and **Key Parameters** in the organization

#### Improvements

Number of accesses in each certificate's summary; error when deleting a key that still has a certificate

### 1.6.0 (2023-08-16)

Updates database model: no

#### New features

**Key Stores** list in the Sys Admin area

Removal of every access to a certificate and of every access of a user

Key deletion in PKCS #11 key stores and `HardDelete` setting per key store

Gecert Connect maintenance mode (`GecertConnect:UnderMaintenance`)

### 1.5.3 (2023-08-11)

Updates database model: no

#### Improvements

Buttons disabled when the user has no permission; permissions checked on the key's or certificate's organization

Encryption and signature verification performed with the certificate's public key

Gecert Connect: server unreachable screen and log actions through `gecertconnect://logs/...` links

### 1.5.2 (2023-08-08)

Updates database model: yes

#### New features

**Key usages** record: every operation performed by Gecert Connect is stored with date, user, operation, algorithm, hash and value

Validity dates stored in the certificate, with the `update-certificate-validity-dates` command to fill in the existing certificates

#### Improvements

Gecert Connect: grouped notifications and certificate list refresh without blocking the interface

### 1.5.1 (2023-08-03)

Updates database model: no

#### Improvements

Failure responses when adding or registering certificates (incorrect password, certificate already in the organization, certificate
without an RSA key, key that does not match the certificate), shown in the web application

Key deletion in the database key store

### 1.5.0 (2023-08-01)

Updates database model: no

#### New features

Reports: expiration of the organization's certificates and events of one certificate, as XLSX, CSV or PDF

Server configuration in Gecert Connect through the `gecertconnect://server/...` link, from the
`GET /api/app-configuration/gecert-connect/server` route

### 1.4.1 (2023-07-26)

Updates database model: no

#### Bug fixes

Fixed the listing of a certificate's authorized users

### 1.4.0 (2023-07-26)

Updates database model: yes

#### New features

Kryptus kNET HSM key store, with its own KMIP client

Check of the minimum Gecert Connect version (`GecertConnect:MinSupportedVersion`)

`KeyInsertionDisabled` setting per key store

#### Improvements

Only users with access to the organization can be granted access to a certificate, and a user cannot have access to the same certificate
in two organizations

### 1.3.0 (2023-07-13)

Updates database model: yes

#### New features

Certificate registration (`.cer`) for an existing key and registration of keys that already exist in the key store

Azure Key Vault key store

Encryption and decryption operations through Gecert Connect

Language selection in Gecert Connect

### 1.2.2 (2023-06-09)

Updates database model: no

#### Bug fixes

The Gecert Connect installer no longer launches the application with elevated privileges

### 1.2.1 (2023-05-23)

Updates database model: no

#### Improvements

Gecert Connect: single instance, button to open the logs, back button on the login screen and new icon

PKCS #12 incorrect-password messages recognized in Portuguese, English and Spanish

### 1.2.0 (2023-04-17)

Updates database model: no

#### New features

First version published with Gecert Connect 1.0.0: advanced settings, logs and notifications in the application

### 0.2.0 (2023-03-27)

Updates database model: yes

#### New features

Gecert Connect: GrantID login, certificates and certificate details pages and installer with .NET 6 and the Lacuna Key Storage
Provider

### 0.1.0 (2023-02-09)

First version: organizations, keys, certificates, certificate accesses, events and the key routes used by the KSP

## Gecert Connect

### 1.2.0 (2024-11-27)

#### New features

**Check server connection** in the advanced settings, with the time of each step, and a color indicator of the server response time;
advanced settings available before login

Certificate verification counter on the initial load and certificate count in the page header

#### Improvements

Certificates verified in batches on the initial load; certificate polling interval of 60 seconds; local data cleaned up on logout

### 1.1.3 (2024-04-10)

#### Improvements

Expiration date with the day; logs with the times of the configuration fetch and of the named pipe

### 1.1.2 (2024-04-02)

#### Improvements

Loading indicator on the certificates page; retry of the request after the token is refreshed; keys already verified are not verified
again; logs of the requests to the server

### 1.1.1 (2023-09-15)

#### Improvements

WebView2 Runtime included in the installer; error messages of the login screen initialization; maintenance polling every 60 seconds and
notifications grouped within 30 minutes

### 1.1.0 (2023-08-17)

#### New features

Server configuration through the `gecertconnect://server/...` link; server not configured, server unreachable, update required and
maintenance screens; log actions through links; language selection

### 1.0.3 (2023-06-09)

#### Bug fixes

The installer no longer launches the application with elevated privileges

### 1.0.2 (2023-05-22)

#### Improvements

Single instance; button to open the logs; back button on the login screen; installer icon and license

### 1.0.1 (2023-04-26)

#### Improvements

New logs in the named pipe and in the certificate installation

### 1.0.0 (2023-04-17)

First published version
